Apple iOS/iPadOS/macOS vulnerabilities

29 known CVE vulnerabilities in Apple iOS/iPadOS/macOS, translated and rated.

CVE-2026-86950HighActively exploited
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
CVE-2026-64762Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64738Critical
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
CVE-2026-64695Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43757Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2023-41991MediumActively exploited
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
CVE-2023-41064HighActively exploited
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVE-2022-32894HighActively exploited
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. This affects iOS 15.6.1, iPadOS 15.6.1, and macOS Monterey 12.5.1. An application may execute arbitrary code with kernel privileges.
CVE-2022-22587CriticalActively exploited
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges; Apple is aware of a report that this issue may have been actively exploited.
CVE-2026-86924Medium
A memory corruption issue was addressed with improved input validation. The flaw affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.
CVE-2026-86869Medium
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, and macOS. Processing a maliciously crafted image may lead to unexpected app termination.
CVE-2026-84621Medium
An authorization issue was addressed with improved access control. This affects iOS, iPadOS, and macOS. An app may be able to access sensitive user data.
CVE-2026-84566High
A memory handling issue in Apple systems allows a local attacker to cause unexpected system termination or corrupt kernel memory. The flaw was fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
CVE-2026-84531Medium
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing maliciously crafted NTLM input may lead to unexpected app termination.
CVE-2026-84519Medium
An out-of-bounds write vulnerability in Apple systems, fixed by improved bounds checking. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.
CVE-2026-84510Medium
A heap buffer overflow was addressed with improved bounds checking. Mounting a maliciously crafted volume may lead to unexpected system termination.
CVE-2026-84489Medium
A buffer overflow vulnerability in Apple systems, fixed with improved bounds checking. An app may cause a denial of service.
CVE-2026-65408Medium
An integer overflow vulnerability in Apple systems, fixed with improved input validation. An app may cause unexpected system termination.
CVE-2026-65404Medium
An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, and macOS. A malicious application may be able to bypass Privacy preferences.
CVE-2026-65354High
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, and macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.
CVE-2026-64714Medium
A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service.
CVE-2026-64744Medium
An information leakage vulnerability in Apple systems, fixed with additional validation. An app may be able to disclose kernel memory.
CVE-2026-64722Medium
A buffer overflow vulnerability in Apple systems, fixed with improved memory handling. Processing a 3D model may lead to disclosure of process memory.
CVE-2026-64711Medium
The issue was addressed with additional entitlement checks. The fix is included in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.
CVE-2026-43797Medium
This issue was addressed with improved checks. An app may be able to access information about a user's contacts.
CVE-2026-43754Medium
This issue was addressed with improved redaction of sensitive information. An app may be able to leak sensitive kernel state.
CVE-2025-43202High
A vulnerability in Apple iOS, iPadOS, and macOS Sequoia allows memory corruption when processing a specially crafted file. The issue is addressed with improved memory handling in iOS 18.6, iPadOS 18.6, and macOS Sequoia 15.6.
CVE-2025-43530Medium
A vulnerability in Apple systems (iOS, iPadOS, macOS) has been addressed with improved checks. The issue involves an app potentially accessing sensitive user data. Fixes are available in iOS 18.7.3, iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2.
CVE-2025-43399High
This issue was addressed with improved redaction of sensitive information. The issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, and macOS Tahoe 26.1. An app may be able to access protected user data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS